a very long password consisting of five or six short, simple words, separated by spaces, is easier for the owner to remember, and much harder for a hacker to crack, than an 8-character password that follows your simple set of rules (upper- and lower-case letter, digit, punctuation), and so therefore should be allowed.